Security Box Score — June 28, 2026

44 CVEs published, led by SourceCodester (4).

44 CVEs published June 28, 2026: 1 critical, 8 high, 12 medium, 23 low; 0 in the KEV catalog at press time; 6 with a public exploit reference; 0 awaiting enrichment. 25 rendered as box scores below; the remaining 19 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	7069	11530	—	—
KEV catalog size	1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

514 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	512	1479	119	854	505	1	11	2	0.1	7.8	.0014	-128 ▼
google	707	882	85	468	300	29	77	6	0.7	8.1	.0023	+539 ▲
microsoft	220	756	58	520	172	6	286	19	2.5	7.8	.0045	+54 ▲
red hat	108	202	9	82	98	13	2	0	0.0	6.5	.0029	+72 ▲
apple	15	67	1	21	43	2	88	7	10.4	5.5	.0020	-7 ▼
canonical	6	20	2	5	8	5	0	0	0.0	5.5	.0011	-8 ▼
freebsd	9	16	0	12	4	0	0	0	0.0	7.8	.0016	+2 ▲
suse	4	6	1	4	1	0	0	0	0.0	8.6	.0029	+2 ▲

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	10	22	6	6	10	0	56	11	50.0	7.3	.0566	+5 ▲
netgear	17	17	0	0	16	1	0	0	0.0	4.3	.0024	+17 ▲
palo alto networks	9	11	1	2	7	1	13	2	18.2	5.9	.0022	+7 ▲
ubiquiti	8	11	7	4	0	0	3	3	27.3	9.9	.0083	+6 ▲
ivanti	4	9	4	5	0	0	25	5	55.6	8.8	.5187	+2 ▲
checkpoint	3	9	1	5	3	0	3	1	11.1	7.5	.0410	-3 ▼
fortinet	2	9	4	3	2	0	28	3	33.3	8.3	.0076	+1 ▲
f5	6	8	4	3	1	0	4	1	12.5	8.9	.0225	+4 ▲

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	104	138	22	47	58	10	33	1	0.7	6.8	.0050	+83 ▲
mozilla	49	55	11	18	26	0	9	0	0.0	7.3	.0026	+43 ▲
gitlab	24	31	0	5	21	5	4	2	6.5	4.4	.0029	+17 ▲
docker	4	7	0	5	2	0	0	0	0.0	8.2	.0016	+1 ▲
drupal	0	5	1	1	3	0	4	1	20.0	5.1	.0026	-5 ▼
github	1	3	1	1	1	0	0	0	0.0	7.0	.0039	-1 ▼
wordpress	0	0	0	0	0	0	2	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	242	270	132	116	18	4	27	2	0.7	8.8	.0040	+217 ▲
adobe	132	134	4	51	77	2	19	2	1.5	5.5	.0021	+132 ▲
ibm	32	81	19	35	27	0	6	0	0.0	7.5	.0031	-17 ▼
progress	5	9	1	7	1	0	6	0	0.0	7.5	.0036	+1 ▲
solarwinds	3	6	2	3	1	0	10	4	66.7	7.8	.6082	+3 ▲
veeam	1	4	2	2	0	0	1	0	0.0	9.0	.0052	-2 ▼
zohocorp	1	3	1	1	1	0	0	0	0.0	8.4	.0170	-1 ▼
atlassian	0	0	0	0	0	0	13	0	—	—	—	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
synology	5	23	2	5	13	3	0	5.6	.0025	-13 ▼
d-link	9	11	0	4	2	5	3	5.5	.0058	+7 ▲
siemens	7	8	0	4	4	0	0	7.5	.0020	+6 ▲
rockwell automation	7	7	1	5	1	0	0	8.7	.0030	+7 ▲
abb	6	6	0	4	2	0	0	7.2	.0018	+6 ▲
schneider electric	6	6	0	4	2	0	0	7.8	.0042	+6 ▲
moxa	5	5	0	3	2	0	0	7.0	.0029	+5 ▲
dahua	3	3	0	1	1	1	0	6.9	.0036	+3 ▲

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
spring	72	73	2	31	39	1	0	0	0.0	6.5	.0024	+71 ▲
openclaw	61	67	0	35	22	10	0	0	0.0	7.0	.0021	+61 ▲
sourcecodester	41	63	0	0	29	34	0	0	0.0	2.1	.0026	+21 ▲
themerex	58	58	5	53	0	0	0	0	0.0	8.1	.0043	+58 ▲
dell	38	56	2	30	24	0	2	1	1.8	7.3	.0017	+26 ▲
edimax	5	56	0	33	0	23	1	0	0.0	7.4	.0070	-39 ▼
jenkins project	36	49	0	9	39	1	3	0	0.0	4.8	.0025	+23 ▲
capgo	46	46	2	22	21	1	0	0	0.0	7.0	.0039	+46 ▲

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-10520	.9991	100.0	10.0
CVE-2026-20253	.9694	99.9	9.8
CVE-2026-35273	.9547	99.9	9.8
CVE-2026-20230	.8820	99.8	8.6
CVE-2026-34910	.8747	99.7	10.0
CVE-2026-34908	.8519	99.7	10.0
CVE-2026-50751	.8377	99.7	9.3
CVE-2026-48907	.7810	99.5	10.0
CVE-2026-34909	.6390	99.2	10.0
CVE-2026-49160	.5383	98.9	7.5

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-10520	10.0	.9991	KEV
CVE-2026-34910	10.0	.8747	KEV
CVE-2026-34908	10.0	.8519	KEV
CVE-2026-48907	10.0	.7810	KEV
CVE-2026-34909	10.0	.6390	KEV
CVE-2026-53576	10.0	.0330
CVE-2026-53753	10.0	.0290
CVE-2026-49777	10.0	.0166
CVE-2026-49869	10.0	.0116
CVE-2026-11429	10.0	.0115

Most disclosures (vendor)
Vendor	CVEs
google	707
linux	513
oracle	242
microsoft	220
adobe	132
red hat	108
apache	104
spring	72
openclaw	61
themerex	58

Most KEV additions (YTD)
Vendor	KEV
microsoft	19
cisco	11
apple	7
google	6
ivanti	5
solarwinds	4
berriai	3
fortinet	3
smartertools	3
ubiquiti	3

Most-affected ecosystems
Ecosystem	Advisories
Maven	39
Packagist	15
PyPI	9
npm	5

Fastest to KEV
CVE	Vendor	Days
CVE-2025-48595	Google	0
CVE-2026-10520	ivanti	0
CVE-2026-11645	Google	0
CVE-2026-12569	PTC	0
CVE-2026-20230	Cisco	0
CVE-2026-20245	Cisco	0
CVE-2026-20253	Splunk	0
CVE-2026-20262	Cisco	0
CVE-2026-28318	SolarWinds	0
CVE-2026-34908	Ubiquiti Inc	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1684
CVE-2021-27102	n/a	2021-11-17	1684
CVE-2021-27101	n/a	2021-11-17	1684
CVE-2021-27103	n/a	2021-11-17	1684
CVE-2021-21017	Adobe	2021-11-17	1684
CVE-2021-28550	Adobe	2021-11-17	1684
CVE-2021-42013	Apache Software Foundation	2021-11-17	1684
CVE-2021-41773	Apache Software Foundation	2021-11-17	1684
CVE-2021-30858	Apple	2021-11-17	1684
CVE-2021-30860	Apple	2021-11-17	1684

Transactions

EXPLOIT PUBLISHED — zephyrproject zephyr: 3 CVEs (CVE-2026-10593, CVE-2026-10644, CVE-2026-10646). Public exploit references added.

Yesterday's Results

How to read these box scores · glossary

44 CVEs published. 25 box scores, 19 table rows — nothing truncated.

CVE-2026-58057LOW

Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   P   L   N   L   L   L    2.3   .0156   73.3     —

AFFECTED
  Product  Versions     Fixed
  Flowise  unspecified  3.1.3

TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)

CWE-178 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Analyzed

CVE-2026-58058MEDIUM

Nmap - Integer Underflow in IPv6 Extension Header Parsing

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   L    6.9   .0137   69.7     —

AFFECTED
  Product  Versions     Fixed
  Nmap     unspecified  —

TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)

CWE-191 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Analyzed

CVE-2026-13501LOW

antlr ANTLR4 gofmt GoTarget.java GoTarget command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   L   N   L   N   L   L   L    1.9   .0118   65.3     —

AFFECTED
  Product  Versions  Fixed
  ANTLR4   4.13.0 –  —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-13515HIGH

Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0085   55.5     —

AFFECTED
  Product  Versions       Fixed
  JD12L    16.03.53.23 –  —

TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-119, CWE-121 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13516HIGH

Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0085   55.5     —

AFFECTED
  Product  Versions       Fixed
  JD12L    16.03.53.23 –  —

TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-119, CWE-121 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13503MEDIUM

antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    5.5   .0077   52.8     —

AFFECTED
  Product  Versions  Fixed
  ANTLR4   4.13.0 –  —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-22 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-13491LOW

78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   N   N   L    2.9   .0062   47.2     —

AFFECTED
  Product        Versions  Fixed
  xiaozhi-esp32  2.2.0 –   —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-404 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Deferred

CVE-2026-49048HIGH

joomcoder.com JoomCCK extension for Joomla — Joomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.1

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0056   44.3     —

AFFECTED
  Product                       Versions     Fixed
  JoomCCK extension for Joomla  1.0-6.4.0 –  —

TIMELINE
  May 27  Reserved by CNA
  Jun 28  Published (CNA: Joomla)

CWE-89 · CNA: Joomla · CVSS v4.0 · 1 reference · NVD status: Analyzed

CVE-2026-13500MEDIUM

antlr ANTLR4 Grammar Action Block OutputFile.java code injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0052   41.6     —

AFFECTED
  Product  Versions  Fixed
  ANTLR4   4.13.0 –  —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-74, CWE-94 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-13484LOW

n/a MLflow — MLflow Experiment-scoped Label Schema CRUD API authorization

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   L   N   L   L   L    1.3   .0050   40.8     —

AFFECTED
  Product  Versions                                    Fixed
  MLflow   4666cffc7912ea606d592fc38d6a75e2935f65e7 –  —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-862, CWE-863 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Analyzed

CVE-2026-13499LOW

yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   N   L   N    2.1   .0047   38.6     —

AFFECTED
  Product                       Versions                                    Fixed
  restaurent-management-system  5f3eca87cb681366866a78038af17891c4c86612 –  —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-79, CWE-94 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13490MEDIUM

glpi-project glpi Document document.send.php canViewFile authorization

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   L   N   N    6.3   .0046   37.7     —

AFFECTED
  Product  Versions  Fixed
  glpi     11.0.5 –  —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-285, CWE-639 · CNA: VulDB · CVSS v4.0 · 4 references · NVD status: Deferred

CVE-2026-10646HIGH

zephyrproject zephyr — Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  N  H  H    7.4   .0045   37.0     —

AFFECTED
  Product  Versions  Fixed
  zephyr   3.7.0 –   —

TIMELINE
  Jun 2   Reserved by CNA
  Jun 28  Public exploit reference published
  Jun 28  Published (CNA: zephyr)

CWE-416 · CNA: zephyr · CVSS v3.1 · 2 references · NVD status: Modified

CVE-2026-58050HIGH

libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   L   L   H    8.3   .0044   36.8     —

AFFECTED
  Product  Versions     Fixed
  libssh2  unspecified  —

TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)

CWE-190 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Analyzed

CVE-2026-58053CRITICAL

Gitea act_runner - Container Hardening Bypass via Workflow Container Options

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    9.4   .0044   36.6     —

AFFECTED
  Product     Versions     Fixed
  act_runner  unspecified  —

TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)

CWE-269 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2026-13485MEDIUM

SourceCodester Class and Exam Timetabling System preview.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0043   35.7     —

AFFECTED
  Product                            Versions  Fixed
  Class and Exam Timetabling System  1.0 –     —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13486MEDIUM

SourceCodester Class and Exam Timetabling System preview6.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0043   35.7     —

AFFECTED
  Product                            Versions  Fixed
  Class and Exam Timetabling System  1.0 –     —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13487MEDIUM

SourceCodester Class and Exam Timetabling System archive.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0043   35.7     —

AFFECTED
  Product                            Versions  Fixed
  Class and Exam Timetabling System  1.0 –     —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13488MEDIUM

SourceCodester Class and Exam Timetabling System preview7.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0043   35.7     —

AFFECTED
  Product                            Versions  Fixed
  Class and Exam Timetabling System  1.0 –     —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13498MEDIUM

yashpokharna2555 restaurent-management-system POST Parameter forgotpassword.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0043   35.7     —

AFFECTED
  Product                       Versions                                    Fixed
  restaurent-management-system  5f3eca87cb681366866a78038af17891c4c86612 –  —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13509LOW

n/a RAGapp — RAGapp Knowledge File files.py FileHandler.remove_file path traversal

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0043   35.2     —

AFFECTED
  Product  Versions  Fixed
  RAGapp   0.1.0 –   —

TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-22 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Deferred

CVE-2026-13512LOW

n/a Databend — Databend Tenant client_session_manager.rs state_key authorization

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0038   31.2     —

AFFECTED
  Product   Versions   Fixed
  Databend  1.2.881 –  —

TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-285, CWE-639 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13493LOW

AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   L   N   L   N   N    1.3   .0037   29.2     —

AFFECTED
  Product          Versions  Fixed
  ComfyUI-Copilot  2.0.0 –   —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-99 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Deferred

CVE-2026-13495LOW

itsourcecode Hospital Management System adminprofile.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   L   L   L    2.0   .0035   27.5     —

AFFECTED
  Product                     Versions  Fixed
  Hospital Management System  1.0 –     —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-13504LOW

code-projects Project Management System Mail Compose mail.php cross site scripting

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   P   N   L   N    2.0   .0035   27.4     —

AFFECTED
  Product                    Versions  Fixed
  Project Management System  1.0 –     —

TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)

CWE-79, CWE-94 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-13489	1.3	27.2	78	xiaozhi-esp32	CWE-662	78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchroniza…
CVE-2026-13511	1.3	25.9	n/a	VoltAgent	CWE-266	VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation impr…
CVE-2026-13496	2.1	25.7	itsourcecode	Hospital Management System	CWE-74	itsourcecode Hospital Management System ajaxmedicine.php sql injection
CVE-2026-13497	2.1	25.7	itsourcecode	Hospital Management System	CWE-74	itsourcecode Hospital Management System appointment.php sql injection
CVE-2026-58056	7.2	24.9	RustDesk	RustDesk	CWE-863	RustDesk - FileTransfer Session Authorization Scope Bypass
CVE-2026-13510	2.9	23.1	SimStudioAI	sim	CWE-327	SimStudioAI sim Password Protection deployment.ts weak hash
CVE-2026-10593	6.5	22.1	zephyrproject	zephyr	CWE-476	Remotely triggerable NULL-pointer dereference in Bluetooth LE Audio BAP unica…
CVE-2026-13508	2.0	20.6	khoj-ai	khoj	CWE-285	khoj-ai khoj Conversation Sharing api_chat.py authorization
CVE-2026-13482	2.9	20.1	skypilot-org	skypilot	CWE-327	skypilot-org skypilot User ID server.py username.encode weak hash
CVE-2026-58051	8.3	19.5	libssh2	libssh2	CWE-908	libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
CVE-2026-58049	8.8	19.4	FFmpeg	FFmpeg	CWE-787	FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
CVE-2026-58055	6.3	16.5	nghttp2	nghttp2	CWE-444	nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Co…
CVE-2026-10644	3.1	12.6	zephyrproject	zephyr	CWE-787	Out-of-bounds write in Microchip SERCOM-G1 (PIC32CM-JH) async UART RX with 1-…
CVE-2026-13514	0.9	7.8	Chess	Play and Learn App	CWE-285	Chess Play and Learn App com.chess AndroidManifest.xml backup
CVE-2026-13507	2.3	7.6	volcengine	OpenViking	CWE-345	volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_t…
CVE-2026-13513	1.3	7.6	MyScale	MyScaleDB	CWE-345	MyScale MyScaleDB SegmentId.h getCacheKey data authenticity
CVE-2026-58052	4.8	6.6	7-Zip	7-Zip	CWE-693	7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision
CVE-2026-13483	1.3	2.6	arc53	DocsGPT	CWE-345	arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authe…
CVE-2026-13502	1.1	1.5	antlr	ANTLR4	CWE-362	antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObje…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-06-28 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.